سند علمی

Usable Optimistic Fair Exchange

چکیده

Fairly exchanging digital content is an everyday problem. It has been shown that fair exchange cannot be done without a trusted third party (called the Arbiter). Yet, even with a trusted party, it is still non-trivial to come up with an efficient solution, especially one that can be used in a p2p file sharing system with a high volume of data exchanged. We provide an efficient optimistic fair exchange mechanism for bartering digital files, where receiving a payment in return to a file (buying) is also considered fair. The exchange is optimistic, removing the need for the Arbiter’s involvement unless a dispute occurs. While the previous solutions employ costly cryptographic primitives for every file or block exchanged, our protocol employs them only once per peer, therefore achieving O(n) efficiency improvement when n blocks are exchanged between two peers. The rest of our protocol uses very efficient cryptography, making it perfectly suitable for a p2p file sharing system where tens of peers exchange thousands of blocks and they do not know beforehand which ones they will end up exchanging. Therefore, our system yields to one-two orders of magnitude improvement in terms of both computation and communication (40 seconds vs. 42 minutes, 1.6MB vs. 200MB). Thus, for the first time, a provably secure (and privacy respecting when payments are made using e-cash) fair exchange protocol is being used in real bartering applications (e.g., BitTorrent) [14] without sacrificing performance.

اسناد مشابه

  • Optimistic Fair Exchange with Multiple Arbiters

    سند علمی۲۰۰۹IACR Cryptology ePrint ArchiveAlptekin Küpçü, Anna Lysyanskaya

    Fair exchange is one of the most fundamental problems in secure distributed computation. Alice has something that Bob wants, and Bob has something that Alice wants. A fair exchange protocol would guarantee that, even if one of them maliciously deviates from the protocol, either b

  • Optimistic Fair Exchange in a Multi-user Setting

    سند علمی۲۰۰۷IACR Cryptology ePrint ArchiveYevgeniy Dodis, Pil Joong Lee, Dae Hyun Yum

    This paper addresses the security of optimistic fair exchange in a multi-user setting. While the security of public key encryption and public key signature schemes in a single-user setting guarantees the security in a multi-user setting, we show that the situation is different in

  • Efficient Optimistic Fair Exchange Secure in the Multi-user Setting and Chosen-Key Model without Random Oracles

    سند علمی۲۰۰۸CT-RSAQiong Huang, Guomin Yang, Duncan S. Wong, Willy Susilo

    Optimistic fair exchange is a kind of protocols to solve the problem of fair exchange between two parties. Almost all the previous work on this topic are provably secure only in the random oracle model. In PKC 2007, Dodis et al. considered optimistic fair exchange in a multiuser

  • Further Observations on Optimistic Fair Exchange Protocols in the Multi-user Setting

    سند علمی۲۰۱۰Public Key CryptographyXinyi Huang, Yi Mu, Willy Susilo, Wei Wu

    Recent research has shown that the single-user security of optimistic fair exchange cannot guarantee the multi-user security. This paper investigates the conditions under which the security of optimistic fair exchange in the single-user setting is preserved in the multi-user sett

  • Optimistic fair exchange in the enhanced chosen-key model

    سند علمی۲۰۱۵Theor. Comput. Sci.Yang Wang, Man Ho Au, Willy Susilo

    Optimistic fair exchange (OFE) is a kind of protocol to guarantee fairness for the parties involved in an exchange with the help of an arbitrator. A fundamental work of optimistic fair exchange is to define security models capturing realistic attacks and design schemes secure in

  • Optimistic Fair Exchange of Ring Signatures

    سند علمی۲۰۱۱SecureCommLie Qu, Guilin Wang, Yi Mu

    An optimistic fair exchange (OFE) protocol is an effective tool helping two parties exchange their digital items in an equitable way with assistance of a trusted third party, called arbitrator, who is only required if needed. In previous studies, fair exchange is usually carried